no interfaces have a carrier
[ 51.635652][ T5260] 8021q: adding VLAN 0 to HW filter on device bond0
[ 51.650944][ T5260] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts.
2026/07/27 15:37:55 parsed 1 programs
2026/07/27 15:37:55 serving rpc on tcp://33689
syzkaller login: [ 82.091102][ T5622] cgroup: Unknown subsys name 'net'
[ 82.332761][ T5622] cgroup: Unknown subsys name 'cpuset'
[ 82.387779][ T5622] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 84.025432][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.679269][ T197] cfg80211: failed to load regulatory.db
[ 90.150586][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.150610][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.243583][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.243604][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.093453][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.109940][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.110755][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.111791][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.113504][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.128003][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.128346][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.128492][ T5709] bridge_slave_0: entered allmulticast mode
[ 93.132509][ T5709] bridge_slave_0: entered promiscuous mode
[ 93.137037][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.140760][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.140918][ T5709] bridge_slave_1: entered allmulticast mode
[ 93.144254][ T5709] bridge_slave_1: entered promiscuous mode
[ 93.194659][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.206325][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.241026][ T5709] team0: Port device team_slave_0 added
[ 93.243021][ T5709] team0: Port device team_slave_1 added
[ 93.272082][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.272092][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.272105][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.274380][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.274390][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.274403][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.574155][ T5709] hsr_slave_0: entered promiscuous mode
[ 93.574958][ T5709] hsr_slave_1: entered promiscuous mode
[ 94.327858][ T5709] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.382209][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 94.384838][ T5709] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.412399][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 94.416884][ T5709] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.450428][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 94.453422][ T5709] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.490070][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 94.606904][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.655412][ T5709] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.678561][ T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.678700][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.699035][ T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.699920][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.156264][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.212532][ T5709] veth0_vlan: entered promiscuous mode
[ 95.239170][ T5709] veth1_vlan: entered promiscuous mode
[ 95.315913][ T5709] veth0_macvtap: entered promiscuous mode
[ 95.327321][ T5709] veth1_macvtap: entered promiscuous mode
[ 95.374814][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.401625][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.435567][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.462729][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.515916][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.516844][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.181108][ T1177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/27 15:38:12 executed programs: 0
[ 96.461832][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.499374][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.503191][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.504568][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.505438][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.559757][ T1177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.065333][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.065454][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.065539][ T5749] bridge_slave_0: entered allmulticast mode
[ 97.066831][ T5749] bridge_slave_0: entered promiscuous mode
[ 97.071888][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.072121][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.072268][ T5749] bridge_slave_1: entered allmulticast mode
[ 97.074680][ T5749] bridge_slave_1: entered promiscuous mode
[ 97.122127][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.124818][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.159829][ T5749] team0: Port device team_slave_0 added
[ 97.161772][ T5749] team0: Port device team_slave_1 added
[ 97.188478][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.188490][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.188512][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.190273][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.190284][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.190299][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.319933][ T5749] hsr_slave_0: entered promiscuous mode
[ 97.320612][ T5749] hsr_slave_1: entered promiscuous mode
[ 97.321170][ T5749] debugfs: 'hsr0' already exists in 'hsr'
[ 97.321242][ T5749] Cannot create hsr debugfs directory
[ 97.630569][ T1177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.539134][ T60] Bluetooth: hci0: command tx timeout
[ 98.804653][ T1177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.280046][ T1177] bridge_slave_1: left allmulticast mode
[ 99.280164][ T1177] bridge_slave_1: left promiscuous mode
[ 99.286523][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.438231][ T1177] bridge_slave_0: left allmulticast mode
[ 99.438254][ T1177] bridge_slave_0: left promiscuous mode
[ 99.438416][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.147619][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.227712][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.274678][ T1177] bond0 (unregistering): Released all slaves
[ 100.394870][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1
[ 100.618471][ T60] Bluetooth: hci0: command tx timeout
[ 100.807221][ T1177] hsr_slave_0: left promiscuous mode
[ 100.847312][ T1177] hsr_slave_1: left promiscuous mode
[ 100.848052][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.848110][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.869932][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.869954][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.958265][ T1177] veth1_macvtap: left promiscuous mode
[ 100.958419][ T1177] veth0_macvtap: left promiscuous mode
[ 100.959351][ T1177] veth1_vlan: left promiscuous mode
[ 100.959999][ T1177] veth0_vlan: left promiscuous mode
[ 101.547631][ T1177] team0 (unregistering): Port device team_slave_1 removed
[ 101.587879][ T1177] team0 (unregistering): Port device team_slave_0 removed
[ 101.752995][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2
[ 102.699011][ T60] Bluetooth: hci0: command tx timeout
[ 102.790381][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.824376][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 102.834923][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.873926][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 102.876328][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.903780][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 102.917146][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.958392][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 103.110605][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.149230][ T5749] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.162706][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.162897][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.179196][ T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.179635][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.682575][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.739196][ T5749] veth0_vlan: entered promiscuous mode
[ 103.768930][ T5749] veth1_vlan: entered promiscuous mode
[ 103.802125][ T5749] veth0_macvtap: entered promiscuous mode
[ 103.812447][ T5749] veth1_macvtap: entered promiscuous mode
[ 103.830388][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.846299][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.865913][ T108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.876032][ T108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.877762][ T108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.879092][ T108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.172906][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.172927][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.213809][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.213826][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/27 15:38:20 executed programs: 2
[ 104.347041][ T5852] ==================================================================
[ 104.347058][ T5852] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.347100][ T5852] Free of addr ffff8880357a710c by task syz.0.17/5852
[ 104.347111][ T5852]
[ 104.347133][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 104.347157][ T5852] Hardware [ 104.347157][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 104.347175][ T5852] Call Trace:
[ 104.347182][ T5852]
[ 104.347196][ T5852] dump_stack_lvl+0xe8/0x150
[ 104.347227][ T5852] print_address_description+0x55/0x1e0
[ 104.347255][ T5852] print_report+0x58/0x70
[ 104.347278][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.347304][ T5852] kasan_report_invalid_free+0xea/0x110
[ 104.347328][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.347353][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.347375][ T5852] __kasan_slab_pre_free+0x104/0x120
[ 104.347391][ T5852] kfree+0x173/0x6c0
[ 104.347404][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.347427][ T5852] f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.347449][ T5852] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[ 104.347470][ T5852] ? down_read+0x156/0x200
[ 104.347488][ T5852] ? __pfx_down_read+0x10/0x10
[ 104.347505][ T5852] ? configfs_write_iter+0xf2/0x430
[ 104.347522][ T5852] ? configfs_write_iter+0xf2/0x430
[ 104.347539][ T5852] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[ 104.347561][ T5852] configfs_write_iter+0x33a/0x430
[ 104.347579][ T5852] vfs_write+0x61e/0xbb0
[ 104.347601][ T5852] ? __pfx_vfs_write+0x10/0x10
[ 104.347619][ T5852] ? __pfx_do_futex+0x10/0x10
[ 104.347637][ T5852] ? kmem_cache_free+0x187/0x6c0
[ 104.347659][ T5852] ksys_write+0x156/0x270
[ 104.347678][ T5852] ? __pfx_ksys_write+0x10/0x10
[ 104.347699][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.347715][ T5852] do_syscall_64+0x174/0x580
[ 104.347732][ T5852] ? trace_irq_disable+0x3b/0x140
[ 104.347747][ T5852] ? clear_bhb_loop+0x40/0x90
[ 104.347763][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.347778][ T5852] RIP: 0033:0x7f1a7eabde99
[ 104.347795][ T5852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.347807][ T5852] RSP: 002b:00007ffd1530fe08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 104.347824][ T5852] RAX: ffffffffffffffda RBX: 00007f1a7ed45fa0 RCX: 00007f1a7eabde99
[ 104.347836][ T5852] RDX: 0000000000000101 RSI: 0000200000000d40 RDI: 0000000000000003
[ 104.347845][ T5852] RBP: 00007f1a7eb53eaf R08: 0000000000000000 R09: 0000000000000000
[ 104.347855][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.347864][ T5852] R13: 00007f1a7ed45fac R14: 00007f1a7ed45fa0 R15: 00007f1a7ed45fa0
[ 104.347881][ T5852]
[ 104.347886][ T5852]
[ 104.347889][ T5852] Allocated by task 5852:
[ 104.347896][ T5852] kasan_save_track+0x3e/0x80
[ 104.347909][ T5852] __kasan_kmalloc+0x93/0xb0
[ 104.347922][ T5852] __kmalloc_node_track_caller_noprof+0x57f/0x7c0
[ 104.347938][ T5852] kstrdup+0x42/0x100
[ 104.347956][ T5852] f_uac2_opts_p_srate_store+0x11f/0x2b0
[ 104.347975][ T5852] configfs_write_iter+0x33a/0x430
[ 104.347990][ T5852] vfs_write+0x61e/0xbb0
[ 104.348005][ T5852] ksys_write+0x156/0x270
[ 104.348021][ T5852] do_syscall_64+0x174/0x580
[ 104.348036][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.348049][ T5852]
[ 104.348052][ T5852] The buggy address belongs to the object at ffff8880357a7100
[ 104.348052][ T5852] which belongs to the cache kmalloc-32 of size 32
[ 104.348064][ T5852] The buggy address is located 12 bytes inside of
[ 104.348064][ T5852] 18-byte region [ffff8880357a7100, ffff8880357a7112)
[ 104.348079][ T5852]
[ 104.348082][ T5852] The buggy address belongs to the physical page:
[ 104.348097][ T5852] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880357a7980 pfn:0x357a7
[ 104.348111][ T5852] flags: 0x80000000000200(workingset|node=0|zone=1)
[ 104.348127][ T5852] page_type: f5(slab)
[ 104.348140][ T5852] raw: 0080000000000200 ffff88813ffb1780 ffffea0000d0fa50 ffffea0000d55850
[ 104.348154][ T5852] raw: ffff8880357a7980 0000000800400033 00000000f5000000 0000000000000000
[ 104.348161][ T5852] page dumped because: kasan: bad access detected
[ 104.348171][ T5852] page_owner tracks the page as allocated
[ 104.348177][ T5852] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4544, tgid 4544 (kworker/u8:5), ts 20674970342, free_ts 0
[ 104.348206][ T5852] post_alloc_hook+0x1f9/0x250
[ 104.348219][ T5852] get_page_from_freelist+0x262a/0x26a0
[ 104.348236][ T5852] __alloc_frozen_pages_noprof+0x18d/0x380
[ 104.348251][ T5852] allocate_slab+0x79/0x5e0
[ 104.348270][ T5852] refill_objects+0x2d8/0x350
[ 104.348288][ T5852] __pcs_replace_empty_main+0x330/0x690
[ 104.348306][ T5852] __kmalloc_cache_noprof+0x468/0x6b0
[ 104.348320][ T5852] kmem_cache_free+0x156/0x6c0
[ 104.348334][ T5852] __fput_deferred+0x2df/0x3e0
[ 104.348347][ T5852] fput_close+0x11f/0x240
[ 104.348360][ T5852] path_openat+0x30d5/0x3850
[ 104.348376][ T5852] do_file_open+0x23e/0x4a0
[ 104.348392][ T5852] do_open_execat+0x12b/0x590
[ 104.348407][ T5852] alloc_bprm+0x24/0x640
[ 104.348422][ T5852] kernel_execve+0x85/0x9c0
[ 104.348442][ T5852] call_usermodehelper_exec_async+0x212/0x360
[ 104.348467][ T5852] page_owner free stack trace missing
[ 104.348472][ T5852]
[ 104.348475][ T5852] Memory state around the buggy address:
[ 104.348482][ T5852] ffff8880357a7000: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 104.348492][ T5852] ffff8880357a7080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 104.348501][ T5852] >ffff8880357a7100: 00 00 02 fc fc fc fc fc fa fb fb fb fc fc fc fc
[ 104.348508][ T5852] ^
[ 104.348516][ T5852] ffff8880357a7180: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 104.348525][ T5852] ffff8880357a7200: fa fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc
[ 104.348532][ T5852] ==================================================================
[ 104.385132][ T5852] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.385152][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 104.385174][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 104.385184][ T5852] Call Trace:
[ 104.385191][ T5852]
[ 104.385198][ T5852] vpanic+0x56c/0xa60
[ 104.385222][ T5852] ? __pfx_vpanic+0x10/0x10
[ 104.385240][ T5852] ? __pfx___schedule+0x10/0x10
[ 104.385263][ T5852] panic+0xc5/0xd0
[ 104.385280][ T5852] ? __pfx_panic+0x10/0x10
[ 104.385298][ T5852] ? preempt_schedule_common+0x82/0xd0
[ 104.385322][ T5852] check_panic_on_warn+0x89/0xb0
[ 104.385341][ T5852] end_report+0x73/0x170
[ 104.385362][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.385390][ T5852] kasan_report_invalid_free+0xfa/0x110
[ 104.385412][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.385441][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.385468][ T5852] __kasan_slab_pre_free+0x104/0x120
[ 104.385488][ T5852] kfree+0x173/0x6c0
[ 104.385503][ T5852] ? f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.385533][ T5852] f_uac2_opts_p_srate_store+0x225/0x2b0
[ 104.385561][ T5852] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[ 104.385587][ T5852] ? down_read+0x156/0x200
[ 104.385609][ T5852] ? __pfx_down_read+0x10/0x10
[ 104.385631][ T5852] ? configfs_write_iter+0xf2/0x430
[ 104.385652][ T5852] ? configfs_write_iter+0xf2/0x430
[ 104.385673][ T5852] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[ 104.385707][ T5852] configfs_write_iter+0x33a/0x430
[ 104.385730][ T5852] vfs_write+0x61e/0xbb0
[ 104.385757][ T5852] ? __pfx_vfs_write+0x10/0x10
[ 104.385781][ T5852] ? __pfx_do_futex+0x10/0x10
[ 104.385803][ T5852] ? kmem_cache_free+0x187/0x6c0
[ 104.385830][ T5852] ksys_write+0x156/0x270
[ 104.385854][ T5852] ? __pfx_ksys_write+0x10/0x10
[ 104.385878][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.385896][ T5852] do_syscall_64+0x174/0x580
[ 104.385917][ T5852] ? trace_irq_disable+0x3b/0x140
[ 104.385935][ T5852] ? clear_bhb_loop+0x40/0x90
[ 104.385955][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.385973][ T5852] RIP: 0033:0x7f1a7eabde99
[ 104.385989][ T5852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.386005][ T5852] RSP: 002b:00007ffd1530fe08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 104.386024][ T5852] RAX: ffffffffffffffda RBX: 00007f1a7ed45fa0 RCX: 00007f1a7eabde99
[ 104.386038][ T5852] RDX: 0000000000000101 RSI: 0000200000000d40 RDI: 0000000000000003
[ 104.386050][ T5852] RBP: 00007f1a7eb53eaf R08: 0000000000000000 R09: 0000000000000000
[ 104.386062][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.386073][ T5852] R13: 00007f1a7ed45fac R14: 00007f1a7ed45fa0 R15: 00007f1a7ed45fa0
[ 104.386094][ T5852]
[ 104.386218][ T5852] Kernel Offset: disabled